Pages

Friday, November 21, 2008

WhiteHouse.gov SSL Error?

Posted by
Michael Coates

www.whitehouse.gov uses an invalid security certificate.

The certificate is only valid for a248.e.akamai.net

(Error code: ssl_error_bad_cert_domain)

Really?

In all fairness, this is not implying that the whitehouse.gov site is compromised. But it is poor SSL practice to have a mismatched domain name. And really, can't the white house spring the extra few bucks to get their own certificate?

UPDATE Jan 24, 09

Looks like they fixed the above issue on Dec 22, 08. However, they introduced a new problem: